diff options
| author | William Pitcock <nenolod@dereferenced.org> | 2018-11-12 15:14:46 +0000 |
|---|---|---|
| committer | William Pitcock <nenolod@dereferenced.org> | 2018-11-12 15:14:46 +0000 |
| commit | ee5932a504d69e591aad7bdd52bd97d1f92d4e32 (patch) | |
| tree | 44cb9351158409d4e53ee774e77bf04450b6bdca /lib | |
| parent | fe67665e19cc98faff4a8ee53a3f4ca4190ca2ef (diff) | |
| download | pleroma-ee5932a504d69e591aad7bdd52bd97d1f92d4e32.tar.gz pleroma-ee5932a504d69e591aad7bdd52bd97d1f92d4e32.zip | |
http security: allow referrer-policy to be configured
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/pleroma/plugs/http_security_plug.ex | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/lib/pleroma/plugs/http_security_plug.ex b/lib/pleroma/plugs/http_security_plug.ex index 8d652a2f3..960c7f6bf 100644 --- a/lib/pleroma/plugs/http_security_plug.ex +++ b/lib/pleroma/plugs/http_security_plug.ex @@ -15,12 +15,14 @@ defmodule Pleroma.Plugs.HTTPSecurityPlug do end defp headers do + referrer_policy = Config.get([:http_security, :referrer_policy]) + [ {"x-xss-protection", "1; mode=block"}, {"x-permitted-cross-domain-policies", "none"}, {"x-frame-options", "DENY"}, {"x-content-type-options", "nosniff"}, - {"referrer-policy", "same-origin"}, + {"referrer-policy", referrer_policy}, {"x-download-options", "noopen"}, {"content-security-policy", csp_string() <> ";"} ] |